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Abstract 

We survey existing scheduling hypotheses made in the literature in self-stabilization, commonly re- 
ferred to under the notion of daemon. We show that four main characteristics (distribution, fairness, 
boundedness, and enabledness) are enough to encapsulate the various differences presented in existing 
work. Our naming scheme makes it easy to compare daemons of particular classes, and to extend existing 
possibility or impossibility results to new daemons. We further examine existing daemon transformer 
schemes and provide the exact transformed characteristics of those transformers in our taxonomy. 
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1 Introduction 

Daemons are one of the most central yet less understood concepts in self-stabilization. Self-stabilization 
fT2l [33] is a versatile approach to enable forward recovery in distributed systems and networks. Intuitively 
a distributed system is self-stabihzing if it is able to recover proper behavior after being started from an 
arbitrary initial global state. This permit to withstand any kind of transient fault or attack [i.e. transient in 
the sense that faults stop occurring after a while) as the recovery mechanism does not make any assumption 
about what caused the initial arbitrary state. 

Self-stabilizing protocols have to fight against two main adversaries that are interdependent. The first 
adversary is the initial global state. The second adversary is the amount of asynchrony amongst participants. 
In classical fault-tolerant [e.g. crash fault tolerant), more asynchrony usually means more impossibilities H^. 
In self-stabilization, more synchrony can also be the source of more impossibilities. 

Consider for example the mutual exclusion protocol proposed by Herman (23 and depicted in Figure [l] 
The protocol operates under the assumption that the network has the shape of a unidirectional ring (processes 
may only obtain information from their predecessor on the ring, and send information on their successor 
on the ring) . Processes may hold tokens depending on their initial state, and the goal of the protocol is to 
ensure that regardless of the initial state, the network converges to a point where a single token is present 
and circulates infinitely often thereafter. Informally, the protocol can be described as follows: whenever a 
process holds a token, it keeps the token with probability p, and sends the token to its immediate successor 
on the ring with probability 1 — p. If a process holding a token receives a token from its predecessor, the two 
tokens are merged. This protocol was well studied assuming synchronous scheduling for all processes fl51ll7j 
and convergence to a single token configuration is expected in 0(n^) time units. Now, if process scheduling 
can be asynchronous, the protocol may not self-stabilize, i.e. there may exist an initial state and a particular 
schedule that prevent tokens from merging. Such an example is presented in Figure [l] Consider that there 
exists two initial token in a ring of size five at positions A and B. The scheduling is as follows: the process 
at position A is scheduled for execution until it passes its token (this happens in 0(1) expected time), then 
the process at position B is scheduled for execution until it passes its token (again, this happens in 0(1) 
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expected time). The new configuration is isomorphic to tlic first one, and the schedule repeats. As a result, 
the two tokens that are initially present never merge, and the protocol does not stabilize. 
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Figure 1: Mutual exclusion vs. asynchronous scheduling 



Another example is the vertex coloring protocol of Gradinariu et al. [13] that is depicted in Figure [2j This 
protocol operates on arbitrary shaped networks under the assumption that no two neighboring processes are 
scheduled simultaneously. The protocol colors the graph using deg{g) + 1 colors in a greedy manner, where 
deg{g) denotes the maximum degree of graph g. Whenever a process is scheduled for execution, it checks 
whether its color conflicts with one of its neighbors (i.e. it has the same color as at least one neighbor). If so, 
it takes the minimal (assuming arbitrary global order on colors) available color to recolor itself. When the 
scheduling precludes neighbors to be simultaneously activated, the protocol converges to a vertex coloring 
of the graph. When the scheduling is synchronous, the protocol may not stabilize. Consider the example 
presented in Figure [2} the initial configuration is symmetric white, that is, all processes have white color. If 
all processes are scheduled for execution in this context, they all choose the minimal available color (here, 
black) and the system reaches a symmetric black configuration. Again, if all processes are scheduled for 
execution in this context, they all choose the minimal available color (here, white) and the system reaches a 
symmetric white configuration. The scheduling repeats and the system never stabilizes. 

Those two examples are representatives of the assumptions made to ensure stabilization of particular 
protocols. They also show that depending on the problem to be solved, depending on the protocol used to 
solve the problem, the class of scheduling hypotheses made is quite different. It is nevertheless appealing 
yet difficult to relate those two scheduling assumptions in a common framework (one relates to temporal 
constraints, while the other relates to spatial constraints). Literature presenting self-stabilizing protocols 
typically abstract scheduling assumptions under the notion of daemon. Intuitively, a daemon is just a 
predicate on global executions, which could in principle be any possible predicate. If every execution of a 
particular protocol that satisfies the daemon's predicate converges to a legitimate configuration, the protocol 
is self-stabilizing under this daemon. 

This approach has the advantage of clearly separating the protocol (that is designed to solve a particular 
problem) and the scheduling assumptions (that can be seen as an adversary of the protocol, hence the term 
daemon). However, the problem of comparing possibly unrelated daemons may occur e.g. when choosing 
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Figure 2: Vertex coloring vs. synchronous scheduling 



a particular protocol for implementation in a particular environment {i.e. assuming a particular daemon). 
One would generally like to design a protocol for the strongest adversary (that is, the most inclusive defining 
predicate), while impossibility results should be given for the weakest adversary (that is, the least inclusive 
defining predicate). Obviously, checking whether a particular solution supports a particular environment 
(that is, the daemon supported by the solution includes the daemon defining the target environment) or 
whether a particular problem is solvable in a particular environment (that is, the daemon that makes the 
problem impossible to solve intersects with the daemon defining the target environment) are important 
questions a self-stabilizing protocol designer or implementer should be able to answer. 

This paper presents a taxonomy for describing daemons having already been used in the self-stabilizing 
literature. After presenting our model in Section J2j we review in Section [3] the four characteristic traits 
of daemons existing in the literature. In Section [Ij we show how our taxonomy can be used to compare 
daemons in particular contexts with a "more powerful" relation, and maps classical daemons according to 
their respective power. Section [5] reviews algorithms transformations for turning a daemon into another and 
depicts the influence of the transformation with respect to all four characteristic daemon traits. Section [6] 
provides some concluding remarks. 

2 Model and Definitions 

Distributed protocol A distributed system consists of a set of processes that form a communication 
graph. The processes are vertices in this graph and V denotes the set of vertices. The edges of this graph 
are pairs of processes that can communicate with each other. Such pairs are neighbors and E denotes the set 
of edges {E C V'^). Hence, g = (V, E) is the communication graph of the distributed system. Each vertex of 
g has a set of variables, each of them ranges over a fixed domain of values. A state j(v) of a vertex v is the 
vector of values of all variables of u at a given time. An assignment of values to all variables of the graph is 
a configuration. The set of configurations of g is denoted by T. An action a of g transitions the graph from 
one configuration to another. The set of actions of g is denoted hy A {A = {(7,7')|7 € r,7' e r,7 7^ 7'})- 
A distributed protocol n on g is defined as a subset of A that gathers all actions of g allowed by tt. The set 
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of distributed protocols on g is denoted by 11 (11 = Pi 



Execution Given a graph a distributed protocol tt on g, an execution of tt on 5 starting from a given 
configuration 70 is a maximal sequence of actions of tt of the following form a = (70, 71) (71, 72) (72, 73) ■ • •■ 
An execution is maximal if it is either infinite or finite but its last configuration is terminal (that is, there 
exists no actions of tt starting from this configuration). The set of all executions of tt on g starting from 
all configurations of F is denoted by E^. The set of all executions of all distributed protocols on S starting 
from all configurations of F is denoted by Sn (^n — {SttItt G H}). 



Daemon The asynchrony of executions is captured by an abstraction called daemon. Intuitively, a daemon 
is a restriction on the executions of distributed protocols to be considered possible. A formal definition 
follows. 

Definition 1 (Daemon) Given a graph g, a daemon d on g is a function that associates to each distributed 
protocol TT on g a subset of executions of tt. 

d : U ^ P(Sn) 

TT I — > d{Tx) e P(S^) 

The set of all daemons on g is denoted by T). 

Given a graph a daemon d on g and a distributed protocol tt on g, an execution cr of tt (ct G S^r) is 
allowed by d if and only if cr G d{TT). Also, given a graph g, a daemon d on g and a distributed protocol tt on 
g, we say that tt runs on g under d if we consider that only possible executions of tt on g are those allowed 
hyd. 



Other Notations Given a graph g and a distributed protocol tt on g, we introduce the following set of 
notations. First, n denotes the number of vertices of the graph whereas m denotes the number of edges 
{n = \V\ and m — \E\). The distance between two vertices u and v (that is, the length of a shortest path 
between u and v in g) is denoted by dist{g, u, v). The diameter of g (that is, the maximal distance between 
two vertices of g) is denoted by diam{g). The maximal degree of g (that is, the maximal number of neighbors 
of a vertex in g) is denoted by deg{g) (note that deg~^{g) denotes the maximal out-degree when g is oriented). 

Each action of g is characterized by the set of vertices that change their state during the action. We 
define the following function: 

Act : A — > P{V) 

a ^ (7, 7') ^ {ve V\-/{v) ^ i{v)\ 

A vertex v is enabled by tt in a configuration 7 if and only if 

37' G F, (7, 7') G TT, 7(1;) ^ i(y) 

Each configuration of g is characterized by the set of vertices enabled by tt in this configuration. We 
define the following function: 

Ena : F X n — > P{V) 

(7, tt) I — > {v G V\v is enabled by tt in 7} 



3 Characterization of Daemons 

In this section, we review the four characteristic traits of daemons existing in the literature, namely distri- 



bution (Section 3.1), fairness (Section|3.2[), boundedness (Section 3.3), and enabledness (Section 3.4). 



-"^where, for any set S, P{S) denotes the set of parts of S. 
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3.1 Distribution 

Constraints about the spatial scheduling of processes appeared since the seminal paper of Dijkstra as 
both the central (a single process is scheduled for execution at any given time) and the distributed (any subset 
of enabled processes may be scheduled for execution at any given time) daemons are presented. Subsequent 
literature [51 1291 15] enriched the initial model with intermediate steps. Intuitively a daemon is /c-central is no 
two processes less than k hops away are allowed to be simultaneously scheduled. A formal definition follows. 

Definition 2 (fc-Centrality) Given a graph g, a) daemon d is k-central if and only if 

3k e N,V7r e n,V(T = (7o,7i)(7i,72) • • • e d(7r),Vi G Ny{u,v) G V^, 

[u^vAue ^ci(7i, 7j+i) Ave Actij^,ji+i)] dist{g, u,v) > k 

The set of k-central daemons is denoted by k-C. 

In the literature, a 0-central daemon is often called distributed, and a c?iam((7)-central daemon is either 
called central or sequential. 

Proposition 1 Given a graph g, the following statement holds: 

Vfc e {0, . . . , diam{g) - 1}, {k + 1)-C C k-C 

Proof Let g be a graph and fee {0, . . . , diam{g) — 1}. We first prove that {k + 1)-C C k-C. 
Let d be a daemon such that d E (k + 1)-C. Then, by definition: 

Vtt e n,Vo- = (7o,7i)(7i,72) • ■ • e d{Tr),yi e N,V(u,w) G 

[u ^ V Au E Act{'ji, 7i+i) Ave Act{'ji, 7i+i)] ^ dist{g, u,v) > k + 1 

As fc < fc + 1, we obtain that: V(u, v) E V'^, dist{g, u,v) > fc + 1 dist{g, u, v) > k. As a consequence: 

e n,Va = (70,71 ) (71,72) ••• G d{TT)yi E N,V{u,v) E , 

[u V Au E Act(7i, 7i+i) Ave Act{'ji,ji^i)] dist{g, u,v) > k 

By definition, this implies that d E k-C and shows us that [k + 1)-C C k-C. 

There remains to prove that {k + 1)-C ^ k-C. It is sufficient to construct a daemon d such that: d E k-C 
and di{k + l)-C. 

Let d be a daemon of k-C that satisfies: 

37r G n, 3cr = (70, 7i)(7i, 72) • • • € d{TT),3i E N, 3(u, v)eV^, 

u ^ V Au E Aci(7i, 7i+i) Av E Act{ji, 7^+1) A dist{g, u,v) ^ k + I 

Note that d exists since the execution a is not contradictory with the fact that d E k-C. On the other 
hand, we can observe that d ^ {k + 1)-C since the execution a cannot satisfy the definition of an execution 
allowed by a (fc + l)-central daemon. This completes the proof of the proposition. □ 

Figure [3] renders Proposition [T] graphically. 

3.2 Fairness 

The fairness properties of daemons was not discussed in the seminal paper of Dijkstra as "executing 
and action" was tantamount to "using critical section" in its mutual exclusion schemes. So, only global 
progress was assumed, i.e. any set of enabled processes could be scheduled for execution. This very weak 
assumption was later referred to as an "unfair" daemon [28l |6l |29l [7] , since it may happen that a continuously 
enabled process is never scheduled for execution. In our taxonomy, this "unfair" property is simply having 
no assumptions besides "distributed". The notion of weak fairness [301 126j prevent such behaviors, as it 
mandates continuously enabled processes to eventually be scheduled by the daemon. A formal definition 
follows. 
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Figure 3: Inclusions of sets of daemons with respect to distribution. 

Definition 3 (Weak Fairness) Given a graph g, a daemon d is weakly fair if and only if 

Vtt e n,Va- = (7o,7i)(7i;72) . • . G S^r, 

[3i eN,3v £ V, (Vj > i, t; e £'^0(7^, tt)) A (Vj >i,v^ Act{^j,^j+i))] ^ a ^ d^n) 

A weakly fair daemon is also called a fair daemon. The set of (weakly) fair daemons is denoted by WT or 
by T . A daemon that is not fair is called unfair. The set of unfair daemons is denoted by T (T = T>\T). 

For some protocols (including protocols involving Byzantine behaviors |13l I14j). weak fairness is not 
sufficient to guarantee convergence, and the notion of strong fairness was defined [321 130j . Intuitively a 
daemon is strongly fair if any process that is enabled infinitely often is eventually scheduled for execution 
by the daemon. A formal definition follows. 

Definition 4 (Strong Fairness) Given a graph g, a daemon d is strongly fair if and only if 

Vtt e n,Vcr = (70, 7i)(7i; 72) • • . G S^r, 

[3i eN,3v e V, (Vj >i,3k> j, v G £'710(7^, tt)) A (Vj >i,v^ Act(^j,"fj+i))] ^ a ^ d{n) 

The set of strongly fair daemons is denoted by SJ-. 

The strongest notion of fairness (in self-stabilizing systems of finite size) is due to Gouda 20 . In 
short, a weakly stabilizing protocol {i.e. a protocol such that from any initial configuration, there exists 
an execution that leads to a legitimate configuration) is in fact self-stabilizing assuming Gouda's notion of 
fairness. Intuitively, a daemon is Gouda fair if from any configuration that appears infinitely often in an 
execution, every transition is eventually scheduled for execution. A formal definition follows. 

Definition 5 (Gouda Fairness) Given a graph g, a daemon d is Gouda fair if and only if 

Vtt e n,Vcr (70, 7i)(7i, 72) • • • e S„,V(7,7') ^ tt 

[3i e N, (Vj >i,3k> j, 7fe = 7) A (Vj > I, (7j, 7j+i) ^ (7, Y))] ^ ^ ^ din) 

The set of Gouda fair daemons is denoted by . 
Proposition 2 Given a graph g, the following properties hold: 
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Proof Wc first prove that QF C ST. Wc start by proving that QT C ST. 

Let d be a daemon of GT. Assume that there exist tt G n and a = (70, 7i)(7i, 72) • • • € 5]^ such that 

3i e N, 3u e V, (Vj >i,3k> j, v e Enai-jk, tt)) A (Vj >i,v^ Act (7^-, 7^+1)) 

Since tt is a finite subset of actions of g, this property implies the following: 

3(7,7') e TT, 3i e N, (Vi >i,3k> i,7fe = 7) A (Vj > i, (7j,7j+i) 7^ (7,7')) 

As d e QT, wc can deduce that a ^ d(7r) by definition. Consequently: 

Vtt e n,Vo- = (7o,7i)(7i>72) • • • e S^, 

[3i e N, 3u e y, (Vj > i, 3A; > j, u e Ena{jk, tt)) A (Vj >i,v^ Act(7j, 7^+1))] ^ ct ^ d(7r) 

This proves that d G iSJ^ and hence that QT C iSJ^. 

It remains to prove that QT 7^ ST. It is sufficient to construct a daemon d such that e ST and ^ 
Let 5f be a graph and tt be a distributed protocol such that: 

3(7, 7', 7") e r^, (7, 7') e TT A (7, 7") e tt a Aci(7, 7') = Act{j, 7") 

Then, it is possible to define a daemon d G ST and an execution a = (7o,7i)(7i,72) . . . € such that: 

3i G N, (Vj >i,3k> j, 7fc = 7) A (Vj > j, 7^- = 7 =» (7^- , 7^+1) = (7, 7") ^ (7, 7')) 

We can conclude that d ^ QT since the execution a cannot satisfy the definition of an execution allowed 
by a Gouda fair daemon. That proves the result (since d G ST by assumption). 

There remains to prove that ST C WT. Wc first prove that ST C WT. 

Let d be a daemon of ST. Assume that there exists tt G n and a = (70, 7i)(7i, 72) • • ■ G such that 

3i G N, 3u G V, (Vj >i,vG Ena{jj, tt)) A (Vj >i,v^ Act(7j, 7^+1)) 

This property implies the following: 

3z G N, 3u G V, (Vj > i, 3fc = j, V G £;na(7fe, tt)) A (Vj > i, u ^ Act (7^-, 7^+1)) 

As d G we can deduce that a ^ d{Tr) by definition. Consequently: 

Vtt G n,Va = (70, 7i)(7i, 72) • • • S S^, 

[3i G N, 3u G y, (Vj >i,ve £no(7j, tt)) A (Vj >i,v^ Act{-fj,-jj+i))] => cr ^ d(7r) 

This proves that d G WJ^ and hence that ST C WJ^. 

It remains to prove that ST ^ WT. It is sufficient to construct a daemon d such that d G WT and 

Let g be a graph, tt be a distributed protocol and u, v be two vertices such that: 

{V G Ena{'j, tt) A u G Ena{j, tt) Av ^ Ena{j' , tt) A u G Ena{^' , tt) 
^ Act(7, 7') A u G Act(7, -y') Av ^ Aci(7', 7) A u G Act(7', 7) 
(7,7') G TT A (7',7) G TT 

Then, it is possible to define a daemon d G WT and an execution a = (70, 7i)(7i, 72) • • • G such that: 

a G d(7r) A (Vp g N, 72p = 7 A 72^+1 = 7') 
We can observe that a satisfies: 

3i = G N, [(Vj > i, {3k >j,v€ Ena{jk,T^)) A (3A:' >j,v^ Ena{jk' , tt))) A (Vj >i,v^ Act(7,-, 7,+i))] 
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Figure 4: Inclusions of sets of daemons with respect to fairness. 

We can conclude that d ^ SJ- since the execution a cannot satisfy the definition of an execution allowed 
by a strongly fair daemon. That proves the result (since d € WJ- by assumption). 

Finally, we prove that C V. As the definition implies that WJ- C V, it remains to prove that 

WJ- 7^ T). It is sufficient to construct a daemon d such that d G T) and d ^ WJ-". 

Let g be a graph and tt be a distributed protocol such that there exists v G V satisfying: 

V(7,7') e TTjU e £'na(7,7r) \Ena{j, Tr)\ > 2 
Then, it is possible to define a daemon d and an execution a = (70, 71) (71, 72) ■ ■ • G such that: 

Vi e N, V Act(7i, 7i+i) A cr e d(7r) 

We can conclude that d ^ WJ- since the execution cr cannot satisfy the definition of an execution allowed 
by a weakly fair daemon. That proves the result (since d e 2? by definition). □ 

Figure [4] renders Proposition [2] graphically. Devismes et al. [10_ observe that in infinite systems, Gouda 
fairness is not the strongest form of fairness. 

3.3 Boundedness 

Boundedness was first presented in [6] as a property achieved by a daemon transformer (see also Section [s]) 
and was also used as a benchmark to evaluate the performance of self-stabilizing protocols under various 
kinds of daemons [U [5] . Intuitively a daemon is fc-bounded if no process can be scheduled more than k times 
between any two schedulings of any other process. Note that this does not imply that there exists a bound 
on the "speed" ratio between any two processes: in particular if a process is never scheduled in a particular 
execution, another process may be scheduled more than k times in the execution sequel without breaking 
the fc-boundedness constraint. As a matter of fact, a daemon can be both fc-bounded and unfair. A formal 
definition follows. 

Definition 6 (fc-Boundedness) Given a graph g, a daemon d is k-bounded if and only if 

3k e N*,V^ e n,Va = (7o,7i)(7i,72) . . . e d(^),V(i,j) e n^'iv e V, 

[[v e Act(7i,7,+i) A{yi£N,l<i^v(^ Act{-fi,ji+i))] 
=^ Vw e V\{v}, \{leN\l <iAue ^ci(7;,7,+i)}| < fc]A 

[[i<j Ave Ac<(7„ 7i+i) Ave Act{-fj,jj+i) A {\fl e N,i < I < j ^ v ^^(7;, 7/+1))] 
=>yue V\{v}, \{l eN\i <l < j Au e Act{-fi,-/i+i)}\ < k] 

The set of k-bounded daemons is denoted by k-B. The set of bounded daemons is denoted by B (B = IJ k-B). 

A daemon that is not k-bounded for any k eN* is called unbounded. The set of unbounded daemons is denoted 
byB (B = V\B). 
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Figure 5: Inclusions of sets of daemons with respect to boundedness. 



Proposition 3 Given a graph g, the following statements hold: 

Proof Let 5 be a graph and fc e N* . We first prove that k-B C (fc H 
Let d be a daemon such that d € k-B. Then, by definition: 



1)-B. 



3k e N*,yn e n,Va - (7o,7i)(7i,72) • ■ ■ G dW,V(i,j) G N^^v € V, 

[[v G Aci(7i,7,+i) A{yi eN,l <i^v ^ Ac<(7/,7,+i))] 
^ Vm G V\{v}, \{l eN\l <iAu€ Act{-fi,ji+i)}\ <k]A 
[[i<j Ave Act{j^, 7i+i) Ave Act(7j, 7j+i) A{Vl em,i <l < j 
=>yueV\ {v}, \{leN\i<l<j Aue ^ci(7,,7;+i)}| < k] 

As fc < fc + 1, we obtain that: 

3k e N*,V^ G n,Va = (7o,7i)(7i,72) dW,V(i,j) G N^^^v G V, 

[[v G Act{ji,-f,+i) A{yieNJ<i^v(^ Act{-fi,ji+i))] 
^ Vm G V\{v}, \{leN\l <iAue Act{-fi,ji+i)}\ < fc + I]a 
[[i<j Ave Act{j^, 7i+i) Ave Act{jj , 7^+1) A {Vl e N,i < I < j 
=^yue V\{v}, \{l eN\i<l <j Aue ^ct(7,,7,+i)}| < fc + I] 



V i Arf(7i,7/+i))] 



V i ylci(7(,7i+i))] 



By definition, this imphes that d G (fc + I)-6 and shows us that k-B C (fc + X)-B. 

There remains to prove that k-B 7^ (fc + V)-B. It is sufficient to construct a daemon d such that: 
d G (fc + I)-6 and d ^ k-B. 

Let d be a daemon oi [k + 1)-B that satisfies: 



3tt e n,3(7 ==(7o,7i)(7i,72)-- - e d(7r),3(i,j) G ,3v e V, 

i < j Av e Act{-fi,ji+i) Ave Act{-f J, ■jj+i) A {VI eN,i < I < j 
A{3u e V\{v},\{l eN\i<l<jAue Arf(7/,7i+i)}| = fc + I) 



V ^ Arf(7/,7i+i)) 



Note that d exists since the execution a is not contradictory with the fact that d G (fc + 1)-B. On the 
other hand, we can observe that d ^ k-B since the execution a cannot satisfy the definition of an execution 
allowed by a fc-bounded daemon. This completes the proof of the first property. 

Finally, we prove that k-B C 1). By definition, k-B C 1). There remains to prove that k-B 7^ V. By the 
first property, there exists a daemon d such that c? G (fc + 1)-B and d ^ k-B. By definition, (fc + 1)-B C 1) 
holds. Hence, the claimed result. □ 

Figure [5] renders Proposition [3] graphically. 
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3.4 Enabledness 



Enablodncss is a characterization of daemon properties that is introduced in this paper. It is defined to 
be related to the intuitive notion that the ratio between the "speed" of the fastest process and that of the 
slowest process is bounded. In an asynchronous setting where we use configurations and time-independent 
transitions between configurations, /c-enablcdness intuitively means that a particular process can not be 
enabled more than k times before being activated. A formal definition follows. 

Definition 7 (fc-Enabledness) Given a graph g, a daemon d is k-enabled if and only if 

3fc e N,V7r e n,V^ = (7o,7i)(7i,72) . . . G d(7r),V(i,j) e N2,Vf e l^, 

[[v G ^ct(7i,7i+i) A{yiGN,l<i^v^ Act{-/i,ji+i))] 
=^\{l eN\l <iAv G Enai'ji, <k]A 

[[i<j Ave Act{"/„j,+i) Ave Act{"fj,jj+i) A {Vl en,i < I < j ^ v ^ Act(7;, 7;+i))] 

=^ \{l eN\i <l < j Av e Ena{ji,TT)}\ < k]A 

[[v e ^cf(7i,7i+i) A{yien,l>i^v^ Aci(7i,7;+i))] 

^ |{/ e N|/ > i Aw e Ena{^i,n)}\ < k] 

The set of k-enabled daemons is denoted by k-£ . The set of daemons of bounded enabledness is denoted by 

£ (£ = [J k-£). A daemon that is not k-enabled for any k e N has an unbounded enabledness. The set of 

fceN 

daemons of unbounded enabledness is denoted by £ (£ = 'D\£). 
Proposition 4 Given a graph g, the following statements hold: 

VfceN / k-£C{k + l)-£ 

Proof Let g be a graph and /c € N. We first prove that k-£ C (A; + l)-£. 
Let be a daemon such that d e k-£. Then, by definition: 

3fceN,V7ren,Va= (7o,7i)(7i,72)... GdW,V(i,j) eN2,V^;e y, 

[[v e Act{j,rh+i) A{yieN,l<i^v<^ Act{'yi,ji+i))] 

^ \{l eN\l < i Av e Ena{"fi,7T)}\ < fc] A 

[[i<jAve ^ci(7,,7,+i) Ave Act{-fj,-fj+i) A (yi e n,i < I < j ^ v i Act(7i, 7(+i))] 

^ \{l eN\i < I < j Av e Ena{"fi,TT)}\ < k]A 

[[v e ^rf(7i,7i+i) A{yieN,l>i=^v ^ Act{-/i,ji+i))] 

=^\{leN\l>iAve Ena{ji,TT)}\ < k] 

As fc < + 1, we obtain that: 

3k e N,V7r € n,Va = (70, 71) (71, 72) ... G d(7r), V(i, j) eN^,yveV, 

[[v e Act(7„7,+i) A(ileN,l<i=>v^ Act{-fi,^i+i))] 
=^ \{l eN\l <i Av e Ena{ji,TT)}\ < fc + 1]a 

[[i<jAve ^ct(7i, 7,+i) Ave Act{'yj,jj+i) A {^1 e n,i < I < j ^ v ^ Act(7(, 7(+i))] 

=^ \{l eN\i < I < j Av e Ena{-fi,TT)}\ < fc + 1]a 

[[v e Act{j,, 7,+i) A{yieN,l>i^v ^ Act(7,, 7;+i))] 

=> \{l eN\l > i Av e Ena{ji,T:)}\ < fc + l] 

By definition, this imphes that d e {k -\- 1)-£ and shows us that k-£ C (fc + l)-£. 

There remains to prove that k-£ ^ {k + l)-£. It is sufficient to construct a daemon d such that: 

d e (fc + l)-£ and d ^ k-£. 

Let d be a daemon of {k + l)-£ that satisfies: 

Btt e n,3a=(7o,7i)(7i,72)-- - e diTr),3{i,j) e N^,3v e V, 

i<j Ave Act(7i, 7i+i) Ave Aci(7j, 7j+i) A {^1 eN,i < I < j ^ v ^ Act(7i, 7;+i)) 
A\{1 eN\i <l < j Av e Ena{^i, Tr)}\ =k + l 
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Figure 6: Inclusions of sets of daemons with respect to enabledness. 



Note that d exists since the execution a is not contradictory with the fact that d E {k + l)-£. On the 
other hand, we can observe that d ^ k-£ since the execution a cannot satisfy the definition of an execution 
ahowed by a fc-enabled daemon. This completes the proof of the first property. 

Finally, we prove that k-£ C T). By definition, k-£ C D holds. There remains to prove that k-£ ^ T). By 
the first property, there exists a daemon d such that d E {k + l)-£ and d ^ k-£. By definition, (fc + !)-£ C 1) 
holds. Hence the claimed result. □ 

Figure [6] renders Proposition [4] graphically. Unlike previous characteristic properties of daemons, en- 
abledness is not completely independent from others. Relationship between enabledness and fairness and 



boundedness are depicted in the sequel (Sections 3.4.1 and 3.4.21 



3.4.1 Relationship between Fairness and Enabledness 

Daemons with bounded enabledness cannot ignore scheduling processes more than k times, implying that 
the overall schedule is at least weakly fair. Nevertheless, the following proposition shows that the converse 
is not true {i.e. there exist daemons that are weakly fair but do not have bounded enabledness, furthermore 
those daemons are not strongly fair either). There also exist daemons that are strongly fair or Gouda fair, 
yet do not have finite enabledness. 

Proposition 5 For any given graph g, the following statements hold: 

ydEV,dE£^dE WT 
3d E W J" \ U ST) 
3dEST\{£U GF) 
3dEgF\£ 

Proof Let <? be a graph. Let d be a daemon such that d E £. Then, there exists fc e N such that d E k-£. 
We are going to prove that d E WT. 

Assume that tt is a distributed protocol and a = (70, 7i)(7i, 72) ... is an execution of d{-K) satisfying: 

3i eW ,3v eV.v E ylc<(7i_i, 7j) A (Vj >i,vE Ena{'fj,Tr)) A (Vj >i,v^ Act{jj,'jj+i)) 

Then, we obtain: 

[v E Aci(7i_i,7i) A {yi eNJ > i ^ V ^ Act(7/, 7;+i))] A |{Z G N|; > i A w G £;?ia (7/, 7r)}| = 00 > fc 

This property is contradictory with a E d{T:) and d E k-£. hence, we deduct that: 

Vvr E n,Va- = (7o,7i)(7i.72) . . . G S,r, 

[3i eN,3v E V, (yj >i,vE Ena{jj,T:)) A (Vj >i,v^ Act{-/j,^j+i))] ^ a ^ d^n) 

That means that d E WJ- and then, we proved that: "id EV^d E £ ^ d E WJ-. 
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There remains to prove that 3d G QT \ £. Consider a daemon d such that d G QT and a distributed 
protocol TTi such that: 

{(7o,7i) e TTi A w e £;na(7o,7ri) A u € Act{-fa,li) 
(71,72) e TTi A-y e ^na(7i,7ri) A'u ^ Act(7i,72) 
(72, 71) e TTi A e Ena{j2, ni) Av ^ Act(72, 71) 

Let 0- be an execution of d(7ri) starting from 72. Now, we define the following set of executions of tti 
(where the product operator denotes the concatenation of portions of executions): 

VA; e N,(Tfc = (7o,7i)(7i,72)-[(72,7i)(7i,72)]*-f^ 

We can define a daemon d' in the following way: 

r V7ren\{7ri},Q!'(7r) = d(7r) 
\ d'(7ri) = (i(^i)U{t7fc|fceN} 

Then, we can observe that d' € QJ^ by construction and that, for any A; € N, the execution ak S d^ni) does 
not satisfy the definition of fc-enabledness. Consequently, we prove that: d' G QT\£. If we follow the same 
reasoning starting from a daemon d, in WF\SF (respectively in SJ^\QJ^), we prove that d' G WJ^\ {SUST) 
(respectively that d' G SJ^ \ (^ U G^))^ which ends the proof. □ 

3.4.2 Relationship between Boundedness and Enabledness 

As previously mentioned, there is not relationship between boundedness and fairness. In this section, we 
prove that there is a connexion between (finite) enabledness and (finite) boundedness. In particular, if a 
daemon is both fc-enabled and fc'-bounded (for some particular integers k and k'), then k < (n — 1) x k' 
(where n denotes the number of processes in the system). However, there exist daemons that are fc-enabled 
(for some integer fc) but do not have finite boundedness, and daemons that are fc'-bounded (for some integer 
fc') but do not have finite enabledness. 

Proposition 6 For any given graph g, the following statements hold: 

W G V,y{k,k') GnxW,{dGk-S AdG k'-B) ^ fc < (n - 1) x fc' 
Vfc GN,3dG k-£ \ B 
\fkGW,3dGk-B\£ 

Proof Firstly, we prove that Vd G P, V(fc, k') G N x N* , {d G k-£ A d G k'-B) ^ fc < (n - 1) x fc'. Consider a 
daemon d such that d G k-£ and d G k'-B for two given (fc, fc') e N x N*. 

As d is fc'-bounded, between two consecutive actions of any vertex v, any vertex u such that u ^ v takes 
at most fc' actions. This implies that there exists at most (n — 1) x fc' actions between two consecutive actions 
of V (since the daemon must ensure the progress). This implies that, between two consecutive actions of 
there exists at most (n — 1) x fc' configurations where v is enabled (without being activated by construction). 
As d has a bounded enabledness fc, we can deduce that fc < (n — 1) x fc', which proves the result. 

Secondly, we prove that Vfc G N, 3rf e k-£ \ B. Consider fc e N, a daemon d such that d G k-£ and a 
distributed protocol tti such that: 

Let a be an execution of d{TTi) starting from 70. Now, we define the following set of executions of tti 
(where the product operator denotes the concatenation of portions of executions) : 

Vfc' Gn*,ak' = (7fe'+i,7fe')(7fe',7fc'-i)---(72,7i)(7i,7o)-a- 
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Note that, for any fc' € N*, the portion of execution {jk'+i,Jk'){7k' ,Jk'-i) • ■ • (72, 7i)(7i, 7o) is 0-enabled. 
Hence, any execution of {ak'\k' S N*} is fc-enabled. 
We can define a daemon d' in the following way: 

V7ren\{7ri},d'(7r) = d(7r) 
d'(7ri) = d(^i)UK-|A:'GN*} 

Then, we can observe that d' G k-£ by construction and that, for any fc' e N*, the execution ak' E d'{Tri) 

does not satisfy the definition of fc'-boundedness. Consequently, we prove that: d' e k-£\ [J k'-B — k-£\B. 

fc'eN* 

Finally, we prove that Vfc G N*, G k-B \ £. Consider k G W , a daemon d such that d G k-B and a 
distributed protocol tti such that: 



3(70,71,72) G T^,3v G 



(70.71) G TTi A w G £;na(7o,7ri) A Act(7o,7i) = {v} 

(71.72) G TTi A w G £;na(7i,7ri) Av ^ Act{'ji,j2) 
(72,71) G TTi A w G i?na(72,7ri) A w ^ ^0^(72, 71) 
^ct(7i,72) = Arf(72,7i) 



Let a be an execution of c?(7ri) starting from 72. Now, we define the following set of executions of tti 
(where the product operator denotes the concatenation of portions of executions) : 

V/c' G N,CTfe/ = (70, 7i)(7i, 72)- [(72,70(71,72)]'' -e 

Note that, for any k' G N, the portion of execution (70, 7i)(7i, 72)- [(72, 7i)(7i, 72)] is 1-bounded. 
Hence, any execution of {ak'\k' G N} is fc-bounded. 
We can define a daemon d' in the following way: 

V7rGH\{7ri},d'(7r) = rf(7r) 
d'(^i)-d(7ri)uK-,|fc'GN} 

Then, we can observe that d' G k-B by construction and that, for any k' G N, the execution ak' G rf'(7ri) 
does not satisfy the definition of /c'-enabledness. Consequently, we prove that: d' G k-B\ [J k'-£ = k-B\£. 

□ 



4 Comparing Daemons 

The four main characteristics presented in Section [3] provide a convenient way to define a particular class of 
daemons: this class simply combines the four characteristic properties. A formal definition follows. 

Definition 8 (Daemon class) Given a graph g and Jour sets of daemons 

C G {fc-C|fc G {0,...,dmm(g)}} 

B G {D,k-B\k&W} 

E G {D,k-£\kEn} 

F G {D,WJ',SF,gF} 

the class of daemons T){C, B, E, F) is defined by V{C, B,E,F) = C n B n E n F. 
4.1 Comparing daemon classes 

Now, each particular daemon instance d may belongs to several classes (those that include all possible 
executions under d). It is convenient to refer to the minimal class of d as the set of characteristics that 
strictly define d. A formal definition follows. 
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Definition 9 (Minimal class) Given a graph g and a daemon d, the minimal class of d is the class of 
daemons 'D{C, B, E, F) such that: 

r deV{C,B,E,F) 

\ yViC B', E', F') C 2?(C, B, E, F), d (j, V{C\ B' , E' , F') 

In any particular class, the canonical daemon of this class is a representative element of that class such 
that for any daemon d in the class, any execution allowed by d is also allowed by the canonical daemon. 
Simply put, the canonical daemon of a class is the largest element of this class with respect to allowed 
executions. A formal definition follows. 



Definition 10 (Canonical Daemon) For a given graph g and a class of daemons 'D{C,B,E,F), the 
canonical daemon d{C,B,E,F) ofV{C,B,E,F) is the daemon defined by: 

r d{C,B,E,F) e V{C,B,E,F) 

[We V{C,B,E,F),W e n,V(7 e e din) cr e diC,B,E,F){TT) 

This way of viewing daemons as a set of possible executions (for a particular graph g) drives a natural 
"more powerful" relation definition. For a particular graph g, a daemon d is more powerful than another 
daemon d' if all executions allowed by d' are also allowed by d. Overall, d has more scheduling choices than 
d' . A formal definition follows. 



Definition 11 (More powerful relation) For a given graph g, we define the following binary relation =^ 
on V: 

V(d, d') G 2?, d ^ d' ^ (Vtt e n, d(7r) C d\Tr)) 
If two daemons d and d' satisfy d 4 d', we say that d' is more powerful than d. 

As with set inclusions, this "more powerful" relation induces a partial order, which is formally presented 
in the sequel. 

Proposition 7 For any graph g. the binary relation =^ is a partial order on T). 

Proof Let ^ be a graph. We are going to prove that the binary relation =^ is refiexive, antisymmetric and 
transitive. Then we show that this order is not total {i.e. that there exists some incomparable elements by 
=^ in V). 

For any daemon d GV, we have Vtt G 11, d{n) C d(7r), which proves that \/d €'D,d ^ d (reflexivity of the 
binary relation =<;). 

Let d and d' be two daemons such that d =4 d' and d' =4 d. Then, by definition: 



Vtt e n, (i(7r) C d'(7r) 1 ^ tt 7/ \ 7// \ 
V. e U, d\nfc d\n) I ^ Vvr G n, d{n) = d'{n) 



In other words, d = d' (antisymmetry of the binary relation =^). 

Let d, d' and d" be three daemons such that d ^ d' and d' =4 d" . Then, by definition: 



Vtt G n,d(7r) C d'M 1 ^ tt 7/ \ ^ ,11/ \ 

w G n, d'(.) E d''in) ) ^ e n, d{.) c d"i.) 



In other words, d =4 d" (transitivity of the binary relation =<;). 

Let be a daemon, tti and 7^2 be two distributed protocols and cti and 0-2 be two executions such that: 

<Tl ^ d(TT\) 

01 ^ d{n2) 
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Then, we can construct two daemons di and d2 in the following way: 

r € n \ {^i}, di W = d(7r) , , r e n \ {^2}, d^iir) = din) 

\ di(7ri) = d(7ri)U{ai} ''''''' \ dalTTs) = ^(772) U {^2} 

Then, we can deduce that d2(7ri) C di(7ri) and rfi(7r2) C d2(7r2), which proves that di and ^2 are not 
comparable using the binary relation =<;. □ 

Another natural intuition is that if d is more powerful than d' and d belong to a particular daemon class, 
then d' also belongs to this class. This is formally demonstrated in the following. 

Proposition 8 For a given graph g, for any daemons d and d' and for any class of daemons ^'(C, B, E, F), 
the following statements hold: 

devtc%,F) ]^d'evic,B,E,F) 

Proof Let g he a graph, d and d' be two daemons and X'(C, B, E, F) be a class of daemons such that: d' =4 d 

and deV{C,B,E,F). 

Assume that C = k-C with A; e {0, . . . , diam{g)}. As d € V{C, B,E,F)=Cr\BnEnF,de k-C. By 
definition: 

Vtt e n,V(T = (7o,7i)(7i,72) • . • e d(7r),Vi € N,V(u,t;) e V^, 

[uy^v Au€ Aci(7i, 7i+i) Av € Aci(7i, 7i+i)] dist{g, u,v) > k 

As d' ^^d,^ € n, rf'(7r) C d{Tr). Then, we obtain: 

Vtt e n,V(7 = (7o,7i)(7i,72).- - e d'{7v) C d{n),Vi e N,V{u,v) e V^, 

[uy^vAue Aci(7i, 7i+i) Av G Aci(7i, 7i+i)] rfist(5, u, t;) > fc 

This implies that d' G k-C = C. We can prove in a similar way that d' G B, d' G E and d' G F. 
Consequently, we obtain that d'GCnBnEnF = V{C, B, E, F), which proves the result. □ 

4.2 Preserving execution properties 

Meaningful distributed protocols provide non-trivial properties when operated. A property can be defined 
as a predicate on computations, valued with true when the predicate is satisfied and false otherwise. A dis- 
tributed protocol satisfies a property if its every executions satisfy the corresponding predicate. Conversely, 
a property is impossible to satisfy if no protocol is such that any of its executions satisfies the corresponding 
predicate. Formal definitions follow. 

Definition 12 (Execution property) For a given graph g, a property of execution p is a function that 
associates to each execution a Boolean value. 

p : Sn — > {true, false} 

a I — > p{a) G {true, false} 

Definition 13 (Property satisfaction) For a given graph g, a distributed protocol it satisfies a property 

d 

of execution p under a daemon d (denoted by tt \= p) if and only if^a G d{'7r),p{a) = true. 

Definition 14 (Property impossibility) For a given graph g, it is impossible to satisfy a property of 
execution p under a daemon d (denoted by d^p) if and only if Mir GH,3a G d{-K),p{<j) = false. 
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The "more powerful" meaning that is associated to the =^ relation permits to intuitively understand the 
two following theorems. If a property is guaranteed by a protocol under a daemon d, it is also guaranteed 
using the same protocol under any "less powerful" daemon d' (the executions allowed by d' are a - possibly 
strict - subset of those allowed by d). Similarly, if a property cannot be guaranteed by any protocol under a 
daemon d, it is also impossible to guarantee this property under a "more powerful" daemon d' (the executions 
that falsifies the property in these allowed by d are also present in those allowed hy d'). A formal treatment 
follows. 



Theorem 1 For a given graph g, let p be a property of execution satisfied by a distributed protocol n under 
a daemon d. Then, 

W GV,d' =4d^Tr^p 

Proof Let 5 be a graph, p be a property of execution satisfied by a distributed protocol tti under a daemon 
d. By definition: 

Vcr € d{TTi),p{a) = true 
Assume now that d' is a daemon such that d' =^ d. By definition: 

Vtt e n,d'(7r) C d{TT) 

Consequently, we get: 

Vcr e , a G d' (iTi) =^ a G rf(7ri) => p{a) = true 

d' 

By definition, we obtain that: tti \= p, which proves the theorem. □ 
Theorem 2 For a given graph g, let p be a property of execution impossible under a daemon d. Then, 

W eV,d^d' ^ d' ^p 

Proof Let g he a graph, p be a property of execution impossible under a daemon d. By definition: 

Vtt G n,3CT e d{Tr),p{a) = false 
Assume now that d' is a daemon such that d =4 d'. By definition: 

\/n€U,d{n)Cd'{n) 

Consequently, we obtain: 

Vtt e n,3a- e d{Tr) C d'{Tr),p{a) = false 

By definition, we obtain that: d' ^ p, which proves the theorem. □ 
A less obvious result shows that dealing with canonical daemons (rather than with the classes they repre- 
sent) is sufficient for comparison purposes. The two derived corollaries demonstrate that using characteristic 
daemons is also valid for proving properties (or lack hereof) executions. This is formalized in the sequel. 

Theorem 3 For a given graph g, let d{C,B,E,F) and d{C' , B' , E' , F') be two canonical daemons. Then, 

CCC 

d{C, B, E, F) 4 d{C', B\ E', F')4^^ | ^ 

FCF' 
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Proof We first prove the "<J=" part of the theorem. 

Assume that there exist a graph g and two canonical daemons d{C,B,E,F) and d{C' , B' , E' , F') such 
that: 

CCC 
BCB' 
E CE' 
F CF' 

We can deduce that CCiBnEnFC C n B' n E' n F' . Then, by the definition of a class of daemons: 

V{C, B, E, F) C P(C", B', E', F') 
By the definition of a canonical daemon, d{C, B, E, F) E 2?(C, B, E, F). Hence: 

d{C, B, E, F) e V{C\ B', E\ F') 
As d(C", B', E', F') is the canonical daemon of the class V{C' , B' , E' , F'), by definition: 
Vtt e n,VCT e S^,cr e d{C , B , E , F){-k) ^ o- e d{C\B',E',F'){n) 

In other words, 

Vtt e n,diC,B,E,F){Tr) C d{C' ,B' ,E' ,F'){tt) 

This means that: d(C, B, E, F) =4 d{C' , B', E' , F'), which ends the first part of the proof. 
Then, we prove the part of the theorem. 

Assume that there exist a graph g and two canonical daemons d{C,B,E,F) and d{C' , B' , E' , F') such 
that: d(C, B, E, F) ^ d(C", B', E', F'). 
By definition of the =^ relation, 

Vtt G n, d{C, B, E, F){tt) C d(C", B', E' ,F'){-k) 

Let d be a daemon of I?(C, B, E, F). As (i(C, S, i?, i^) is the canonical daemon of the class of daemons 
V{C,B,E,F), 

Vtt e n,V(T e S^, cr e d(7r) ^ a e d{C,B,E,F){Tr) 

=^ a edlc',B',E',F'){-K) 

In other words, Vtt G 11, d{TT) C d{C' , B' , E' , F'){7t). By the definition of the =^ relation, this implies that: 

W G P(C, B,E,F),d4 d{C', B', E', F') 

As d{C', B', E', F') is the canonical daemon of the class of daemons V{C', B' , E' , F'), d{C' , B' , E' , F') G 
V{C' ,B' ,E' ,F') and Proposition [s] implies 

Vd G V{C, B, E, F), d G V{C',B\ E' , F') 

In other words, Cf^Br\Er\F ^ V{C, B, E, F) C V{C', B' , E', F') = C n B' n E' n F' . 

Assume by contradiction that C" C C. By the properties of boundedness, enabledness and fairness (see 
propositions of Section 3) , {C\C')n Bn En F ^ (b. So, there exists a daemon d such that d e C'nBnEnF 
and d ^ C". Then, we can deduce that d ^ C'nB'nE'nF', which contradicts CnBnEnF C C'nB'nE'f\F' . 

By the same way, we can prove that: 

CCC" 
B(ZB' 
E CE' 
F CF' 

This result ends the proof. □ 
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Corollary 1 For a given graph g, let d{C, B, E, F) and d{C' , B' , E' , F') be two canonical daemons. Then, 
for any property of execution p satisfied by a distributed protocol tt under d{C, B, E, F), the following state- 
ments hold: 

c'cc ^ 

d{C' ,B' ,E' ,F') 




Proof This result is a direct corollary from Theorems 1 and 3. □ 



Corollary 2 For a given graph S, let d(C,B,E,F) and d{C' , B' , E' , F') be two canonical daemons. Then, 
for any property of execution p impossible under d{C, B, E, F), the following statements hold: 




d{C',B',E',F') Y^p 

Proof This result is a direct corollary from Theorems 2 and 3. □ 



4.3 The Case of the Synchronous Daemon 

Although we did not describe it in the previous sections, the synchronous daemon play a very important 
part in the self-stabilization literature. First introduced by Herman [22] to enable analytical tractability 
of probabilistic self-stabilizing protocols, it was later used in a number of works, either to demonstrate 
impossibility results (due to initial symmetry |23j ) or to enable efficient solution to existing problems (due 
to the single scheduling generated |15j). A synchronous daemon simply executes every enabled process at 
every step. A formal definition follows. 

Definition 15 (Synciironous Daemon) Given a graph g, the synchronous daemon (denoted by sd) is 
defined by: 

Vtt e n,Vo- = (7o,7i)(7i,72) • ■ • e sd{TT),yi eN,\fv eV,v e £'na(7i,7r) ^ v e Act{{ji,ji+i)) 

We first show that there is a connection between enabledness and synchrony. Indeed a synchronous 
daemon cannot prevent an enabled process from being activated, even for a single step. 

Proposition 9 For any given graph g, 0-£ = {sd}. 

Proof Let g be a graph and d be a daemon such that d G Q-£. We now prove that d = sd. 
By definition: 

3k e N,V7r e n,Vcr = (7o,7i)(7i,72) ■ ■ ■ e d(7r),V(i,j) G N^Vw G V, 

[[v e Arf(7,,7,+i) h{\/l^n,l <i^v i Aci(7,,7/+i))] 
^ |{Z e N|/ < i Aw e £;na(7(,7r)}| = 0]a 

[[i < j A -y e Aci(7^, 7,+i) Ave ^ci(7j, 7^+1) A (V^ £ N, i < ^ < j ^ w ^ Act[-ii,"fi+i))] 

=^\{l en\i <l < j ^v e £:na(7/,7r)}| = OjA 

[[v G ^rf(7„7,+i) h{\/l^n,l>i^vi Aci(7i,7/+i))] 

^\{l&n\l>i^v<^ £;na(7i,7r)}| = O] 

In other words, no action (7,7') of any execution of rf(7r) for any distributed protocol tt can satisfy: 
3i; e w G Ena{j, tt) A v ^ ^c^(7, 7')- Hence: 

Vtt e n,Vcr = (70, 7i)(7i, 72) • • • € rf(7r),Vi G N,Vw G y,w ^ Ejia{-/^,TT) y v e Act{j„j,+i) 
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As V G Acf(7i,7i+i) implies that v G Ena{'yi,'jT), this property is equivalent to the following: 

Vtt e n,V£7 = (7o,7i)(7i,72) • • • e d(7r),Vi e N,Vu e e Ena{-fi,Tr) ^ w e Act{ji,'yi+i) 

By the definition of the synchronous daemon, this means that d = sd, which ends the proof. □ 
It may first come to a surprise that boundedness is absolutely not related to synchrony, but as we pointed 

out previously, boundedness is also not related to fairness. The exact characteristics of the synchronous 

daemon are captured by the following proposition. 

Proposition 10 Given a graph g, 'D{0-C,'D,0-£,ST) is the minimal class of SD. Moreover, SD = 
d{0-C,V,0-£,ST). 

Proof First, we prove that sd G 0-C \ 1-C. By definition, sd S 0-C = T>. By contradiction, assume that 
sd e 1-C. Let TT e n be a distributed protocol such that: 

3(7, 7') e TT, Ena{j, tt) =V 

Then, by definition of the synchronous daemon, the first action of any execution a = (70, 71) (71, 72) • . • S 
srf(7r) starting from 70 = 7 satisfies: Act{'yo,li) = V. Consequently, a does not satisfy the property of 
executions allowed by a 1-central daemon, which contradicts sd € 1-C and proves the result. 

Second, we prove that sd G B. As sd e V, assume for the purpose of contradiction that there exists 
fc e N* such that sd G k-B. Then, consider a distributed protocol tt such that: 

{(70,71) G TT A Ena{jo,TT) = {v} 
Vi G {1,...,A; + l},(7i,7^+i) € n A Enai^i,^) = {u} 
(7.+2,7.+3)e.Ai?na(7.+2,7r) = W 
£;na(7fe+3,7r) = 

We can observe that the execution a defined by a = (70, 7i)(7i, 72) • • • (7fe+2,7fc+3) satisfies a G sd{'K). 
But, on the other hand, the following holds: 

Btt G U,3a = (7o,7i)(7i,72) • • • e d{Tr),3{i = 0,j = k + 2)GN^,3vG V, 

[i<jAvG Act{-j, , 7,+i) Ave Act{^j,^j+i) A{yi GN,i <l< j ^ v ^ ^ci(7,, 7^+1))] 
A3u eV\{v},\{l eN\i <l < j Aue Act(7;,7;+i)}| =k + l 

By the definition of a fc-bounded daemon, this implies that sd ^ k-B. 
We now prove that sd G OS. By Proposition 8, OS = {sd}. This implies that sd G OS. 
Next, we prove that sd G SJ^ \ QT. We start by proving that sd G ST. By the definition of the 
synchronous daemon: 

Vtt G n,Va- = (70, 7i)(7i, 72) • • • G S„,Vw G V, {3i G N,w G Enairn^-K)) ^ t; G Aci(7j,7j+i) 

Consequently, 

Vtt G n,Vcr = (70, 7i)(7i, 72) . . . G S^, 

[3i G N, 3t; G V", (Vj > z, 3fc > j, v G Ena{^k, tt)) A (Vj >i,v^ Ac<(7j, 7^+1))] cr <^ sd(7r) 

By the definition of a strongly fair daemon, this implies that sd G ST. Now, we prove that sd ^ QT. 
Consider a distributed protocol tt such that: 

(7, 7') G TT A Act{j, 7') C Ena(j, tt) 
3(7, 7', 7") e r^, <( (7, 7") G TT A Act(7, 7") ^ Enai-f, tt) 
(7", 7) G TT A Act{i', 7) = Ena{-y", tt) 



19 



We can construct an execution a of n starting from 7 in the following way: a — (7, 7")(7"i 7) (7? l") ■ ■ ■■ 
We can observe that a S sd^n) (since at each action, any enabled vertex is activated). Consequently, 

3tt e Il,3a = (7o,7i)(7i:72) • • ■ e sd(7r), 3(7, 7') e tt, 

3z = e N, (Vj > i, 3/c = 2j > J, 7fc = 7) A (Vj > i, (7^, 7j+i) ^ (7, Y)) 

By the definition of a Gouda fair daemon, this implies that sd ^ QT. 

The four previous results imply that I?(0-C, V, 0-£, SJ^) is the minimal class of sd. As I?(0-C, T), 0-£, SJ-) C 
0-£ by definition and 0-£ ~ {sd} by Proposition [o] we can deduce that 2?(0-C, I?, 0-£, — {sd}. Then, 
the definition of a canonical daemon implies that sd = (i(0-C, I?, 0-£, which completes the proof. □ 

4.4 A map of classical daemons 

We are now ready to present our map for "classical" daemons (i.e. daemons most frequently used in the 
literature. Using our taxonomy, these daemons can be defined as follows. 

Definition 16 (Classical daemons) Given a graph g, the classical daemons 0/ the literature are defined 
as follows: 

• The unfair daemon (denoted by ufd) is (i(I?,I?,I?,I?). 

• The weakly fair daemon (denoted by wfd) is d{'D^'D,T>^WJ-). 

• The strongly fair daemon (denoted by sfd) is d{'D,T>,'D,SJ-). 

• The Gouda fair daemon (denoted by gfd) is d{'D,T>,T>^QJ-). 

• The locally central unfair daemon (denoted by 1-ufd) is c?(l-C,2?,2?,2?). 

• The locally central weakly fair daemon (denoted by 1-wfd) is d{l-C ,T> ,1) T) . 

• The locally central strongly fair daemon (denoted by \-sfd) is d{l-C,'D,'D,SJ-). 

• The locally central Gouda fair daemon (denoted by 1-gfd) is d{l-C,'D,'D,QT). 

• The central unfair daemon (denoted by 0-ufd) is d{0-C,'D,'D,'D) . 

• The central weakly fair daemon (denoted by 0-wfd) is d{0-C,'D,'D,yVT). 

• The central strongly fair daemon (denoted by 0-sfd) is d{0-C,'D,'D,SJ-). 

• The central Gouda fair daemon (denoted by 0-gfd) is d{0-C,T>^'D,QT). 

Now, our main theorem (Theorem [s]) permits to map the relationships between all classical daemons 
in the literature is a rather compact format. For any given graph g. Figure [7] depicts graphically those 
relationships. 

5 Daemon Transformers 

As it is easier to write distributed protocols under daemons providing strong properties (that is, under weak 
daemons that allow only a limited set of possible executions, such as a central or a bounded daemon), many 
authors provide protocols to simulate the operation of a weak daemon under a strong one. Such protocols 
are called daemon transformers. Note that several works in the area of self-stabilization may be used as 
daemon transformers although they were not initially designed with this goal in mind {e.g. a self-stabilizing 
token circulation protocol that performs under the unfair distributed daemon can easily be turned into a 
daemon transformer that provides a central daemon out of an unfair distributed one). 
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ufd 



<C j)-wfd~^ C ^-wfd 



Figure 7: Relationship between classical daemons (an arrow from a daemon d to a daemon d' means that 
d' ^ d, note that we remove all arrows obtained by transitivity). 

In the following, we propose a survey of the main daemon transformers that also preserve the property of 
self-stabilization. That is, the protocol transforming the daemon is a self-stabilizing one. Figure[8]summarizes 
this survey and maps for each daemon transformer the initial daemon and the simulated one. We restrict 
ourselves to deterministic daemon transformers in order to be able to exactly compute the characteristics of 
the simulated daemon. Note that features of the emulated daemon (centrality, fairness, boundedness, and 
enabledness) provided in the following are satisfied only after the stabilization of the daemon transformer. 
In the sequel, we use the notation d i — > d' to denote that a daemon transformer simulates d' while operating 
under d. 

Alternator-based daemon transformers. In 1997, Gouda and Haddix [21^ introduced the alternator 
problem. Roughly speaking, the aim is to design a protocol such that no neighbors are enabled simultaneously 
yet ensures that some fairness property holds (namely, between any two steps of a particular process, any 
of its neighbors may execute at most one step) . They claim that this protocol is useful to simulate a locally 
central daemon under a distributed one. Actually, this protocol ensures the following daemon transformation: 
ufd I — > d{l-C,yVT,n'^-B,n^-£) and works on chain topologies only. Johnen et al. |27| later designed an 
alternator for any oriented tree but require the initial daemon to be weakly fair. In other words, they 
provide the following daemon transformer: wfd \ — !• d(l-C, WJ-, n^-B, ri^-E). Finally, Gouda and Haddix [22] 
provided an alternator for an arbitrary underlying communication graph that provides the following daemon 
transformation: wfd i — > d{l-C, WT, diam{g)-B, {nx diam{g))-£) . This last transformer makes the following 
assumption: the graph is identified (that is, every vertex has a unique identifier) and each vertex knows the 
cyclic distance of the graph (the cyclic distance is defined as the number of edges of the longest simple cycle 
if the graph has cycles, and two otherwise). 

Mutual exclusion-based daemon transformers. The classical mutual exclusion problem requires that 
no two vertices are simultaneously in critical section and that every vertex infinitely often enters critical 
section. So, any self-stabilizing mutual exclusion protocol may be turned into a daemon transformer that 
provides a central weakly fair daemon. In his seminal work on self-stabilization [TT, Dijkstra proposed a 
self-stabilizing mutual exclusion protocol for ring topologies (using a token circulation) under a distributed 
unfair daemon. His protocol needs however a distinguished vertex (that is, one vertex executes a protocol 
that is different from every other). Formally, we can derive the following daemon transformation from this 
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protocol: ufd i — > d{diam{g)-C,WJ^,l-B,n-£). From this first protocol, several works later revisited the 
mutual exclusion problem. From a daemon transformation viewpoint, the most interesting ones follow. Using 
a token circulation, Beauquier et al. ([3]) provide a ufd \ — > d{diam(g)-C ,W F , deg^ {g)-B , n x deg~^{g)-£) 
daemon transformation on oriented graph whenever the graph is strongly connected. Still on graphs with 
a distinguished vertex, Datta et al. provided [H] a self-stabilizing depth-first token circulation that perform 
the following daemon transformation: wfd' — > d{diam{g)-C,WJ-,deg{g)-B,2m-£). Finally, Datta et al. [7] 
improved this result enabling the same daemon transformation but starting from an unfair daemon (more 
formally, they achieve the following daemon transformation: ufd i — > d{diam{g)-C,yVJ-,deg{g)-B,2m-£)) 
and they do not require the existence of a distinguished vertex. 



Local mutual exclusion-based daemon transformers. Local mutual exclusion refines mutual exclu- 
sion since it requires the same exclusion and liveness properties but only within a vicinity around each 
vertex (and not for the whole graph as for the - global - mutual exclusion problem). In other words, a 
/c-local mutual exclusion protocol ensures that no two vertices are simultaneously in critical section if their 
distance is less than k and that any vertex enters infinitely often in critical section. Hence, we can easily 
design a daemon transformer providing a weakly fair fc-central daemon from such a protocol. Note that the 
aforementioned alternator protocols solve a particular instance of 1-local mutual exclusion. 

A classical solution to 1-local mutual exclusion has been proposed by Beauquier et al. 1] using un- 
bounded memory at each vertex. This protocol ensures the following daemon transformation: ufd i — > 
d{l-C, WJ", {n-l)-B, ^^^^-f ). Using only a bounded memory, Gairing et al. provided [T8^ a 2-local mutual 
exclusion that can be turned into a ufd i — > d{2-C, m x n^-B, m x rfi-E) daemon transformer. 

Several works give more general solutions dealing with /c-local mutual exclusion for any integer k. For 
example, Goddart et al. generalize '19] the work of Gairing et al. jl8j . Their solution performs the ufd i — > 
d{k-C,yVJ^,0{n^)-B,0{n^)-£) daemon transformation. Using a local clock synchronization, Boulinier and 
Petit provide 4j a wavelets protocol that can be used for fc-local mutual exclusion. Hence, their protocol 
gives the following daemon transformation: ufd i — > d{k-C,yVJ^, diam(g) [^^77^] -£). Danturi et al. [5] 
deal with dining philosophers with generic confiicts under a distributed weakly fair daemon. The main idea is 
to clearly distinguish the communication graph from the conflict graph. If we consider that two vertices are 
in conflict if they are at distance less than k from each other, this protocol ensures /c-local mutual exclusion. 
This protocol provides the wfd 1 — > d{k-C,'yVJ^,'D,deg{g)''-£) daemon transformation but requires each 
vertex to be the root of a tree spanning its fc-ncighborhood. 

Finally, Potop-Butucaru and Tixeuil introduced in 24: a weaker version of 1-local mutual exclusion by 
replacing the fairness property by a progress property. This new problem was called a conflict manager and 
leads to the ufd 1 — > 1-ufd daemon transformation. To our knowledge, this daemon transformer is the only 
one to perform a transformation according to a single identifier daemon characteristic. 

Note that all solutions presented in this paragraph require the graph to be identified. 



Other daemon transformers. Even if they transform several characteristics of daemons (with the notable 
exception of [24j ) . all previously mentioned daemon transformers are designed for transforming only the 
distribution of daemons. Indeed, only a few works dealt with transforming other daemon characteristics. 

Regarding fairness transformation, Karaata |30| provided a daemon transformer to perform strong fairness 
under weak fairness. More formally, this protocol is a 1-wfd 1 — >■ d{2-C, SJ^, nxdeg{g)^-B, deg{g)^-£) daemon 
transformer. This protocol needs the graph to be identified and each vertex to have an unbounded memory. 
Karaata later refined |31j the protocol to perform exactly the same daemon transformation but requiring 
only an identified graph. 

Using cross-over composition, Beauquier et aZ.[2 gave a generic transformer for enabledness. More 
precisely, they design a ufd 1 — > d(T>,yVJ-,k-B,n x k-£) daemon transformer whenever a transformer that 
provides /c-boundedness is available. 



22 



6 Conclusion 



We surveyed existing scheduling hypotheses made in the hterature in self-stabihzation, commonly referred 
to under the notion of daemon. We showed that four main characteristics (distribution, fairness, bounded- 
ness, and enabledness) are enough to encapsulate the various differences presented in existing work. Our 
naming scheme makes it easy to compare daemons of particular classes, and to extend existing possibility 
or impossibility results to new daemons. We further examined existing daemon transformer schemes and 
provided the exact transformed characteristics of those transformers in our taxonomy. 

Two obvious extensions of this work are to include system hypotheses that are not related to scheduling 
{e.g. atomicity) and to further refine the taxonomy to include recently introduced randomized scheduling [lOj . 
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Figure 8: Summary of existing daemon transformers. 
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